Alternative Characterizations for 
Strong Equivalence of Logic Programs 



Pedro Cabalar 



O 
O 

(N 



< 

o 



> 
(N 

m 
O 

o 

O 

O 



X 



AI Lab., Dept. of Computer Science 
University of Corunna, Spain 
cabalarOdc . f i . udc . es 



Abstract 



In this work we present additional results re- 
lated to the property of strong equivalence 
of logic programs. This property asserts 
that two programs share the same set of sta- 
ble models, even under the addition of new 
rules. As shown in a recent work by Lif- 
schitz, Pearce and Valverde, strong equiva- 
lence can be simply reduced to equivalence in 
the logic of Here- and- There (HT). In this pa- 
per we provide two alternatives respectively 
based on classical logic and 3- valued logic. 
The former is applicable to general rules, but 
not for nested expressions, whereas the latter 
is applicable for nested expressions but, when 
moving to an unrestricted syntax, it generally 
yields different results from HT. 



1 Introduction 

There is no doubt that the application of logic pro- 
gramming (LP) as a tool for knowledge representa- 
tion has influenced in the progressive evolution of LP 
towards a more logical-style orientation, avoiding the 
initial syntactic restrictions. Think, for instance, how 
the stable models semantics Q has been successively 
modified to cope with explicit negation and disjunc- 
tive heads ||, default negation in the head ||, g| or, 
finally, the full use of nested expressions jllj . Perhaps 
as a result of this evolution, the following question has 
become interesting: when can we consider that two 
(syntactically different) programs IT and II2 represent 
the same knowledge! 

From a traditional LP perspective, we would say that 
LTi and II2 are equivalent when they share the same 
set of stable models like, for instance, the programs 
{p} and {p <— not q} whose only stable model is {p}. 



However, nonmonotonicity may cause them to behave 
in a different way in the presence of additional rules 
(just add fact q to both programs). Thus, if we want 
to check whether Hi and H2 actually represent the 
same knowledge, we must require a stronger condition, 
talking instead about strong equivalence: for any n, 
the stable models of III U II and II2 U II coincide. 

An elegant solution to this problem is the recent char- 
acterization of stable models relying on Heyting's logic 
of Here- and- There (HT). In |l4|, Pearce first showed 
that stable models can be simply seen as some kind of 
minimal HT models. Then, in [jio), Lifschitz, Pearce 
and Valverde proved that, in fact, this characterization 
fits with the semantics for nested operators indepen- 
dently proposed in jll] and, what is more important, 
that two programs are strongly equivalent iff they have 
the same set of HT models. 

In this paper we provide two closely related alterna- 
tives to HT that rely on classical logic and 3-valued 
logic (£3), respectively. These alternatives present the 
advantage of using very well-known formalisms, which 
may help for a better insight of strong equivalence (the 
main emphasis of this paper), but can be useful for 
implementation purposes too. Unfortunately, we also 
show how, in both cases, their scope of applicability 
seems to be smaller than in the HT case. This is ev- 
ident for the classical encoding we present, which can 
only be used as a "direct" semantics^] for non-nested 
logic programs, whereas the L3 characterization prop- 
erly handles nested expressions in a direct way, but 
loses some important properties when nesting is also 
allowed for rule conditionals. 

The paper is structured as follows. The next section 
recalls the basic definition of stable models for general 
(non-nested) logic programs. Section || describes the 



1 Application of the classical encoding to nested expres- 
sions is also possible, but only after a previous syntactic 
transformation. 



classical encoding. In Sections Qand|^ we respectively 
describe nested expressions and the 3-valued formal- 
ization. After that, we briefly comment the differences 
between the HT and L3 interpretations. Finally, Sec- 
tion [?] concludes the paper. Proofs of theorems have 
been included in an appendix. 

2 Stable models 

The syntax of logic programs is defined starting from a 
finite set of ground atoms £, called the Herbrand base, 
which will serve as propositional signature. We assume 
that all the variables have been previously replaced by 
their possible ground instances. Letters a,b,c,d,p,q 
will be used to denote atoms in £, and letters /, J to 
denote subsets of E. A logic program is defined as a 
collection of rules of the shape: 

eti ; . . . ; a m ; not b\ ; . . . ; not b n < — 

ci, . . . ,Cr,not d\, . . . ,not d s (1) 

We call head (resp. body) to the left (resp. right) hand 
side of the arrow in ([!]) . The comma and the semicolon 
are alternative representations of conjunction A and 
disjunction V, respectively. When m = n = we 
usually write _L <— B instead of <— B, whereas when 
r = s = we directly write H instead of H <— or 
H <—T. 

Sometimes, it will be convenient to think about pro- 
gram rules as classical propositional formulas, where 
<— and not are respectively understood as material 
implication and classical negation. In this way, the 
usual expression / |= R denotes that interpretation / 
satisfies rule R (seen as a classical formula), whereas 

I \= II means that / is a model of the program II (seen 
as a classical theory). 

The reduct of a program II w.r.t. some set of atoms 
/, written H 1 , is defined as the result of replacing in 

II any default literal not p by T, if p 1 , or by _!_ 
otherwise. 

Definition 1 (Stable model) A set of atoms / C £ 
is a stable model of a logic program II iff I is a minimal 
model ofH 1 . □ 

3 Strong equivalence in classical logic 

We can think about the definition of stable models as a 
try-and-error procedure which handles (propositional) 
interpretations for two different purposes. On the one 
hand, we start from some arbitrary interpretation I a , 
we can call the initial assumption, used to compute the 
reduct H 1 . On the other hand, in a second step, we 



deal with minimal models of II 7 which, in principle, 
need not to have any connection with I a . Each min- 
imal model I p can be seen as the set of propositions 
we can prove by deductive closure using the rules in 
H 1 . When the proved atoms coincide with the initial 
assumption, I p = I a , a stable model is obtained. 

In order to capture this behavior, we reify all the 
atoms p € £ to become arguments of two unary 
predicates, assumed{p) and proved(p), that respec- 
tively talk about I a and I p . Sort variable X will be 
used for ranging over any propositional symbol in £. 
When considering the models of any reified formula 
F, we will implictly assume that they actually corre- 
spond to F A UNA, where UNA stands for the unique 
names assumption for sort E. This allows us identi- 
fying any Herbrand model M of this type of formulas 
with a pairQ (I p ,I a ) so that M[assumed] = I a and 
M [proved] — I p . Expression M \= F represents again 
satisfaction of reified formulas - ambiguity with re- 
spect to I |= F is cleared by the shape of structures 
and formulas. 

Given this simple framework, we provide two encod- 
ings: the first one is a completely straightforward trans- 
lation to capture stable models, whereas the second 
one is a stronger translation to characterize strong 
equivalence. 

Definition 2 (First translation) For any logic pro- 
gram rule R like we define the classical formula R 
as the material implication: 

r s 

( /\ proved{cij) A ( A ^assumed(di)) D 

i=l i=l 

n ra 

( \j proved{a,ij) V ( \l -^assumed(bi)) (2) 

i=l i=l 

Given a logic program H, the formula II stands for the 
conjunction of all the R, for each rule R € II. □ 

Intuitively, to obtain the minimal models I p of II 7 we 
can use an ordering relation among pairs (I p ,I a ) ^ 
(J p ,J a ) that holds when both I a = J a is fixed and 
I p C J p . The corresponding models ^-minimization 
have a simple syntactic counterpart^: predicate cir- 
cumscription CIRC [II; proved]. Second, after obtain- 
ing minimal models, we must further require I p = I a , 
that is, we want pairs of shape (/, I) where what we 

2 The superscripts p and a, which stand here for proved 
and assumed, respectively correspond to the worlds here 
and there in HT or to the sets of positive and non-negative 
atoms in L3. 

3 See Section 2.5 in §. 



assumed results to be exactly what we proved. These 
pairs of shape (I, I) will be called total. Clearly, forc- 
ing models to be total corresponds to including of the 
formula: 

VX. (proved(X) = assumed(X)^ (3) 

The intuitions above arc not new. In fact, they were 
used in Theorem 5.2 in which, adapted^ to our 
current presentation, states the following result: 

Proposition 1 Let £ be a propositional signature. A 
set of atoms I C £ is a stable model of a logic program 
n iff M = (I, I) satisfies the formula: 

CIRC [II; proved] A (§) 



Theorem [j] points out that the II encoding is still too 
weak for a full characterization of strong equivalence. 
We show next how, using a more restrictive transla- 
tion (that is, adding more formulas) it is possible to 
obtain theories for which all their models are subtotal. 
To understand how to do this, consider the example 
program IIo = {p <— q} where: 

Flo proved(q) D proved{p) 

This formula has 12 models: it restricts the extent of 
proved to 3 cases (0, {p} and {p, q}) leaving free, in 
each case, the 4 possibilities for assumed. 

({p,q},{p,q}) (M,M) (0,0) 



In order to capture strong equivalence of two pro- 
grams, it seems that we should not only compare the 
final selected models, but also the set of non-minimal 
ones involved in the minimization. For instance, it is 
easy to see that, due to monotonicity of classical logic, 
the following proposition trivially applies: 

Proposition 2 Let IT and II2 be two logic programs 
such that |= III = II2. Then IT and II2 are strongly 
equivalent. □ 

Unfortunately, the opposite does not necessarily hold: 

111 and II2 can be strongly equivalent while IT and 

112 have different models. This is because encoding 
in Definition || allows some models which are actually 
irrelevant for strong equivalence, as we will show next. 

Definition 3 (Subtotal model) For any reified the- 
ory T, a model (I p ,I a ) of T , with LP C L a , is called 
subtotal iff (L a ,L a ) is also model of T . □ 

Let SUBT(T) represent the set of subtotal models of 
T (note that total models are also included) . It is clear 
that any model M £ SUBT(II) is irrelevant for select- 
ing the total ^-minimal models, i.e., for obtaining the 
stable models of II. The next theorem shows that the 
coincidence of subtotal models is a necessary condition 
for strong equivalence. The proof (in the Appendix) 
constitutes a direct rephrasing of that for the main 
theorem in p0| . 

Theorem 1 Two logic programs IT and IT are 
strongly equivalent iff SUBT(IIi) = SUBT(ri 2 ) □ 

4 In jl^] they used a duplicated signature (atoms p and 
p') instead of reification and, therefore, they actually ap- 
plied parallel circumscription. This result seems to have 
been first presented in |Q2|. 



{{p},{p,q}) (0,M) 

Figure I: Subtotal models of IIo. 

Figure [t] shows the 6 subtotal models of IIo, represent- 
ing the ^-ordering relationships among them. Notice 
how subtotal models always satisfy L p C L a , that is, 
we can require: 

\/X.(proved{X) D assumed(X)) (4) 

Unfortunatley, the addition of this axiom is still not 
enough to rule out all the irrelevant models. For 
instance, IIo A (|J) has still one non-subtotal model: 
(0, {q}). This model, however, has the particularity 
that its assumed atoms L a = {q} do not satisfy the 
original program rule: L a \^ p <— q. As it is well- 
known, any stable model / of a program n, is also a 
classical model: I \= U. So, instead of starting from 
any arbitrary initial assumption L a , we can begin re- 
quiring L a \= n. This can be easily incorporated into 
the encoding as follows. For each logic program rule 
R like ([!]), we define R as: 

r s 

( ^ assumed(ci)^j A ( A -^assumed(di)^j D 

i=l i=l 

n ra 

( \j assumed(ai)) V ( y -^assumed(bi)) (5) 

i=l i=l 

Again, n stands for the conjunction of R for all R £ II. 



Definition 4 (Second translation) For any logic 

program H we define the formula II* = f II A II A (||) . 
□ 

The proof for the following theorem uses well-known 
properties of circumscription (see 0) to show that the 
additional formulas do not affect to the final set of 
stable models. 

Theorem 2 For any logic program II: 

CIRC [IT ; proved] A © = CIRC [II; proved] A © □ 

But, of course, the real interest of II* is that it finally 
rules out irrelevant models: 

Property 1 Let H be a logic program. Then, any 
model M = (IP, I a ) of IT is subtotal. □ 

Finally, this property, together with theorem [j], di- 
rectly implies: 

Theorem 3 Two logic programs TIi and II2 are 

strongly equivalent iff \= Ti\ = II*, . □ 

4 Nested expressions. 

The previous section has shown a way of reducing 
strong equivalence of logic programs into a simple 
equivalence test in classical logic, providing in this 
way a (we think) easier alternative to the HT char- 
acterization. However, although we gain in simplicity, 
it must be noticed that we lose in semantic quality: 
this classical encoding does not provide a general in- 
terpretation for program connectives but, instead, is 
limited to rules of shape ([!]) . The HT characterization 
is clearly stronger in this sense, since it provides a di- 
rect interpretation for any possible nesting of program 
connectives. 

In fllf a more general shape for program rules was con- 
sidered. A nested expression is defined as any prepo- 
sitional combination of atoms with 0-ary operators _L, 
T, unary operator not and binary operators ',' and 
A logic program is now a set of rules Head <— Body 
where Head and Body are nested expressions (notice 
that the rule conditional <— is the only operator that 
cannot be nested). An example of such a rule could 
be, for instance: 

a,b <— not (c; not d) (6) 

Stable models for this kind of programs can be easily 
described by a simple modification in the definition of 
program reduct. We define now H 1 as the result of 



replacing in n every maximal occurrence^ of not F by 
_L if / |= F or by T otherwise. Note that the previous 
definition of reduct corresponds to the particular case 
in which F is an atom. 

An interesting result derived from this modified se- 
mantics (proposition 7 in ]ll[) is that any program 
with nested expressions is strongly equivalent to some 
(non-nested) program, just consisting of rules like 
([!]). To obtain this non-nested program, the following 
transformations are defined. Let F, G and H represent 
nested expressions. By a O (3 we mean that we replace 
some regular occurrence of a by (3. Then, we handle 
the following strongly equivalent transformations: 

(i) F,G^G,F and F;G^G; F. 

(ii) (F, G),H (G, H) and 
(F;G);H ^ F; (G; H). 

(iii) F, (G; H) & (F, G); (F, H) and 
F; (G,H)^(F;G),(F;H). 

(iv) not (F; G) <^ not F, not G and 
not (F, G) <^> not F; not G. 

(v) not not not F not F . 

(vi) f,ToFandf;To T. 

(vii) F, _L <=>■ _L and F; _L <=>■ F. 

(viii) not T _L and not _L <^> T. 

(ix) (F, G <- H)^{F <- H), (G «- H). 

(x) (F ^G;H)^{F^- G), (F *- H). 

(xi) (F <- G, not not H) (F; not H <- G). 

(xii) (F; not not G <- H) & (F <- not G, H). 

For instance, rule © can be successively transformed 
as follows: 

a, b <— not c, not not d. By (iv) 

a <— not c, not not d, 

b <— not c, not not d. By (ix) 

a; not d <— not c, 

b; not d <— not c. By (xi) 

This treatment of nested expressions exceeds the appli- 
cability of our previous classical logic representation. 

5 That is, any not F that is not in the scope of an outer 
not . 



From a practical point of view, such a limitation is 
not very important, since we can always unfold nested 
expressions by applying (i)-(xii). Nevertheless, from a 
theoretical point of view, this clearly points out that 
the classical encoding fails as a real semantic charac- 
terization for LP connectives. 

As shown in |lCj| ], one of the important features of 
the HT formalization, apart from the result for strong 
equivalence, is that it preserves the above interpreta- 
tion of nested expressions. We show next that a simi- 
lar behavior can be obtained using standard 3-valued 
logic (£3). Surprisingly, L 3 provides the same inter- 
pretation for nested expressions, but generally differs 
once free nesting of rule conditionals is allowed. 

5 L 3 : Three valued logic. 

We will use prepositional syntax plus Lukasiewicz's 
unary operator^ I. Intuitively, a formula IF is never 
unknown and points out that F is valuated to true. In 
this way, -^IF would mean that "F is not true," i.e., 
it is either false or unknown. If F, G are L3 formulas 
and p an atom of the signature £ then: 

p, -<F, FVG, T, L, IF 

are also L3 formulas. Propositional derived operators 
(A, D, =) are defined in the usual way. 

A three valued interpretation M is a function M : 
£ — ► {0, 1/2, 1} assigning to each atom peEa truth 
value M(p) which can be (false), 1/2 (unknown) or 
1 (true). We will usually represent M as the pair of 
sets of atoms (I p ,I a ) respectively containing the pos- 
itive (true) and consistent (non-false) atoms where, 
of course, we require consistence: I p C I a . Conse- 
quently: 



M(p) = 



1 ifpeP 
if p g r 

1/2 otherwise 



Note that we use here the same notation as for the 
pairs we handled in the reified approach. This is not 
casual: the negative information of a 3-valued inter- 
pretation will be used to represent default negation, 
whereas the positive information will represent the set 
of proved atoms. 

Definition 5 (L3 valuation of a formula) 

We extend the valuation function M to any formula 
F, M(F) £ {0, 1/2, 1}, so that: 



1) M(T) = 1 and M (_L) = 

2) M(-.F) = 1 - M(F) 

3) M(F V G) = max{M{F), M(G)) 



4) M(IF) = 



if M{F) = 1 
otherwise 



An interpretation M satisfies a formula F, written 
M |=3 F when M(F) = 1. When F is satisfied by 
any interpretation, we call it an L^-tautology and write 
|=3 F. As usual, an interpretation is a model of a the- 
ory when it satisfies all its formulas. Maintaining the 
previous terminology, a 3-valued interpretation M is 
called total iff it has the shape M = (1,1), that is, it 
contains no unknown atoms. Clearly, when consider- 
ing total interpretations, the I operator can be simply 
removed, and L3 collapses into 2-valued propositional 
logic. 

LP connectives are simply defined among the following 
derived operators: 



mF c = f 
notF c = f 
F d = 



G 
F 



G 



clef 



-nZ-».F 
-nmF 

{IF D IG) A {mF D mG) 

(F^G)A{G^- F) 



It is easy to check that the derived semantics for each 
one of these operators corresponds to: 



5) M(mF) = 

6) M(notF) = 

7) M(G <- F) : 

8) M(F ^ G) - 



1 if M{F) ± 

otherwise 

1 if M{F) = 
otherwise 



1 if M{F) < M{G) 

otherwise 

1 if M(F) = M{G) 
otherwise 



°For instance, see M, pag. 8, where I is denoted as □. 



Operator m acts is the dual of I, {mF can be read 
as "F is consistent") whereas implication <— is the 
one proposed by Fitting H and Kunen [Q. When 
we represent some program II inside L3, we will con- 
sider it as a single formula consisting in the conjunc- 
tion of all the program rules. Note also that when 
|=3 F <-> G, we can apply uniform substitution in L3 
as we would do in classical propositional logic. For 
instance, |=3 {not F) <-> (_L <— F) means that we can 
replace any occurrence of (not F) by (J. «— F) and 



vice versa. Let o and • be two meta-operators, any 
of them indistinctly representing ! or m. Then, the 
following formulas are also L 3 tautologies: 



o (FAG) «-> of AoG (7) 

o(J?vG) « 0FV0G (8) 

• Of H Of (9) 

no Jf <-> -no F (10) 



As m is defined in terms^j of I , this means that we can 
unfold any L3 formula until I is exclusively applied to 
literals. Using these properties, the following lemma 
can be easily proved: 

Lemma 1 Let R be a pogram rule like and let 
the pair M = (7 p ,/ a ) have the common shape of 
an L^-interpretation and a classical interpretation for 
proved/assumed. Then, M \=3 R iff AI \= R A R. □ 

Besides, by inspection on L3 semantics, we also have 
that: 

Lemma 2 For any transformation a <f> f3 in (i)-(xii): 
hs a <-> (3. □ 

Theorem 4 Let LIi and II2 be two logic programs pos- 
sibly containing nested expressions. Then III and II2 
are strongly equivalent iff: ^=3 iLIi = 11^2- O 

Notice that we check ZIIi = IXI2 instead of the stronger 
condition LIi <-» II2. To understand the difference, 
consider I±i = {a} and 1T2 = {a <— T}. The in- 
terpretation M — ({a}, {a}) is the only model of 
both programs and so, ^3 lUi = ZLI2 . However, 
III <-> II2 is not a tautology, since M' = (0, {a}) makes 
M'(IIi) = 1/2^1 = M'<Jl 2 ). 

6 Differences with respect to HT 

Theorem [| shows that HT and L3 coincide in their 
interpretations of programs with nested expressions. 
The next natural question is, do the HT and L3 in- 
terpretations coincide for any arbitrary theory? The 
answer to this question is negative, as we will show 
with a pair of counterexamples. Of course, due to 
theorem ||, these counterexamples cannot be just pro- 
grams with nested expressions, as defined in Section |]. 
We study, for instance, a nested conditional, and the 
negation of a conditional. 

Consider the theory consisting of the singleton formula 
(a <— b) <— c. In HT, this theory is equivalent to (a <— 

7 Of course, we could have equally chosen the dual op- 
erator m as the basic one. 



b,c), which seems to be the most intuitive solution, 
whereas in L3 it is actually equivalent to (a; not c <— 
6). Both equivalences hold in classical propositional 
logic. However, for computing stable models, their 
behavior is quite different. For instance, the theory 
{&, (a <— c), (c <— a), ((a <— b) <— c)} would have a 
unique stable model {&} under the HT interpretation 
whereas, under L3, an additional stable model {a, 6, c} 
is obtained. 

The second example shows the most important prob- 
lem of the I/3 interpretation: once we allow arbitrary 
theories, we may obtain non-subtotal models, some- 
thing that does not happen)^] in HT. Let n be the the- 
ory {&, not (a <— b)}. Its unique stable model is {b} 
both in HT and L3. However, while the pair ({6}, {&}) 
is the unique HT modelQ of n, in L3 there exists a 
second model ({b},{a, b}) which is not subtotal. In 
other words, when using L3 for this general syntax, 
the set of L 3 models does not fully characterize strong 
equivalence. 

7 Discussion 

The study of strong equivalence is probably one of the 
most active current topics in research in Logic Pro- 
gramming, as it becomes evident by the increasing 
amount of new results obtained recently (just to cite 
three examples jl6[ |j). 

In |l5fl , a classical logic characterization is also pro- 
vided, which presents several similarities with the ap- 
proach we present here. The main difference of Pearce 
et al's method is that it actually relies on a syntactic 
translation from HT into classical logic. This transla- 
tion informally consists in a duplication of the atoms 
in the signature so that an atom p denotes our proved 
whereas an atom p' would denote assumed. In this 
paper, our initial motivation for using classical logic 
was to improve the presentation and the understand- 
ing. In this way, we have directly started from non- 
nested programs, trying to capture the definition of 
stable models in a way as direct as possible. As a 
result, our characterization does not provide an inter- 
pretation of nested connectives. In order to deal with 
them, we would need to apply a previous step, using 
transformations (i)-(xii). Pearce et al's encoding starts 
from HT logic, and so, deals with nested expressions 
(in the same way as HT does). Besides, the transfor- 
mation presented in |l5|] has the additional advantage 
of being linear, while (i)-(xii) are not polynomial in 

8 See for instance Fact 1 in Jlo[ ] . 

9 In fact, the expression not (a <— b) is HT-equivalent to 
the pair of constraints (_L <— not b) and (_L <— a). 



the general case. Despite of these two advantages of 
Pearce et al's approach, it must be noticed that none 
of the two classical encodings can actually be consid- 
ered a full-semantics for nested logic programs, since 
in both cases, a previous syntactic transformation is re- 
quired. Therefore, translation to classical logic is very 
interesting for practical purposes, but is limited from 
a purely semantic point of view. 

Another similarity between our classical encoding with 
respect to [|l5| is, not only how to decide strong equiv- 
alence, but how to obtain stable models. In our Sec- 
tion H we simply used to that purpose the result pre- 
sented by Lin and Shoham in |ll| and then included 
slight variations that we proved to be sound. In flql , 
a quantified boolean formula is used instead: 

(f>' A -3V((V < V') A 7ht[0]) (11) 

where V is the set of atoms, <p is the original program, 
<f>' results from replacing any atom p by p' and finally 
tht[<P] is Pearce et al's translation from HT to classical 
logic. On the other hand, Lin and Shoham's result 
involving circumscription can be formulated^] as: 

(V = V) A C[4>] A SV{{V < V) A C[</>]) (12) 

where C[<j)] simply replaces each not p by ->p'. Notice 
how, at least structurally, ((l^) is very similar to (fTl|). 

As for the L 3 encoding, it must also be noticed 
that other logical characterizations have been obtained 
apart from HT. In for instance, they use instead 
another logic, KC, and show that this is, in fact, the 
weakest intermediate logic (between intuitionistic and 
classical) that allows capturing strong equivalence of 
logic programs with nested expressions. An interest- 
ing open question is how logic KC deals with nested 
conditionals since, as we have shown, this is the case 
where HT and L3 diverge. 

The interest of the encoding we have presented is per- 
haps the use of a multi- valued logic which is commonly 
known and understood and yields a natural characteri- 
zation. We believe that the use of L3 may be especially 
suitable as a valid alternative for "by hand" studies of 
strong equivalence, since it allows applying intuitive 
properties of I and m operators (as an example, look 
at the proofs in the appendix) in a more or less intu- 
itive way. 
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Appendix A. Proofs. 
Proof of theorem [l] 

The right to left direction was proved in proposition 
U For the left to right direction, assume there is some 
M = {L p ,I a ), M G SUBT(lii) but M SUBT(II 2 ). 
Let M' be the total pair M' = (I a , I a ). We will show 
that it is possible to construct a program n so that I a 
is a stable model of III U II but not of II2 U II, or vice 
versa. We consider two cases: 

1. M' SUBT(n 2 ). As M e SUBT(lii), by defini- 
tion of SUBT, M' is model of EL.. We construct 
the program II = {p : p G /"}. Clearly, M' is 
still model of III A II but, now, it is also minimal: 
a strict subset of proved atoms is not allowed. 
Therefore, I a is a stable model of IL U II. On the 
other hand, as M' is total, but M' g" SUBT(II 2 ), 
then M' ^= nV As a result, I a cannot be stable 
model of n 2 U II. 

2. M' G SUBT(il 2 ). Note first that, as M <£ 
SUBT(II 2 ) and M < M' we conclude M ^ tl 2 
and M -< M' . We construct the program: 

n = {p : p e F} U 

{(p^q):p,qe(I a -P),P^q} 

It is easy to see that M' \= II and so, M' |= IT 2 All. 
We will show that M 1 is also minimal for that 
theory. Let us assume that there exists another 
model (J, I a ) strictly lower than M', J C I a , and 
try to reach a contradiction. As atoms of I p are 
facts of n, but M = (IP, I a ) is not model of II 2 , 



we must have: I p C J. Now, take some q G 
J — I p and some p G I a — J. The rule p <— q 
belongs to II but (J,I a ) does not satisfy the rule 
translation. Therefore, (J, I a ) ^= II and we reach 
a contradiction. Since we have proved that M' is 
minimal, I a is stable model of II 2 UIL Finally, we 
study program ITi. It can be easily checked that 
M |= II and so M \= IT UIL But as M < M', M' 
is not minimal for III U II and so I a is not stable 
model for this program. 



Proof of theorem |^ 

We start from CIRC [II*; proved] A (||), observing that 
the conjuncts il and (|^) of II* can be moved outside 
the circumscription. The reason for this is that in 
il, predicate proved does not occur, whereas in (Q) 
it occurs negatively (considering a D (3 as ->a V 0). 
Therefore, we can respectively apply equivalence (3.2) 
and proposition 3.3.1 in g], to obtain the equivalent 
formula: 

CIRC [II; proved] A ft A §) A © 

Now, notice that, by definition, the circumscription of 
CIRC[II;profed] has the shape of a conjunction II A a 
(where a is a second order formula we do not need to 
detail). So, the above formula is actually: 

nAaAflA(@)A(|) 

Finally, notice that (|^) implies (|j) , whereas II A (||) im- 
plies II, and so, the implied conjuncts can be removed, 
obtaining the equivalent formula: 

Il A a A (|) 

which is nothing else but CIRC [II; proved] A (||). 
Proof of property |l] 

We must show that M' = (I a , I a ) is also model of II*. 
Clearly, as n exclusively refers to predicate assumed, 
M \= II iff M' |= II. On the other hand, it is clear 
that M' \= (|) - in fact, it further satisfies (|). So, 
we only have to prove that M' \= II. Assume that, for 
some rule R G II, AI' ^ R, which in classical logic is 
equivalent to M' ^ ^(R), i.e., M' must satisfy: 

r s 

( /\proved(ci)) A ( A -^assumed(di)') A 

i=l i=l 

n m 

( A ->proved(ai)) A ( A assumed(bi)) 

i=l i=l 



As in M', proved and assumed are equivalent, this 
implies that M 1 must also satisfy: 

r s 

( A assumed{cij) A ( j\ -iassumed{di)) A 

i=l i=l 

n tci 

{ A -^assumed(ai)) A ( A assumed{bi)) 

i=l i=X 

But this formula is exactly -'(i?) and so, M' cannot be 
model of II nor II*, reaching a contradiction. 



Proof of lemma |l| 

Using properties (JjjT ( |Io| ) and the definitions of derived 
operators, a general logic program rule like (|l|) is equiv- 
alent to the conjunction of the pair of formulas: 

lei A • • • A lc r A -imrfi A • • • A ~^md s D 
lax V • • • V Za„ V • • • V -nmfci V • • • V ~^mb m (A-l) 

mci A • • • A mc r A -imcq A • • • A -^md s D 
max V • • • V ma n V • • • V ^mbx V • • • V ~^mb m (A-2) 

Note that in formulas, operators £ and m are only 
applied to atoms and, vice versa, atoms only appear in 
the scope of I and m . As the interpretation of I and m 
is always bivalued, we can just consider the meaning of 
each Ip and mp individually and then intcrprctc the 
whole formula as a classical propositional one. Now, 
note that Ip is true iff p ^ I p that is M |= proved(a) , 
and mp is true iff p G I a , that is, M \= assumed{a). 
Therefore, ( A-l ) and (|A-2|) respectively correspond to 
R and R. 



Proof of lemma |2| 

As ',' and ';' are simply understood as A and V, prop- 
erties (i)-(iii), (vi) and (vii) are straightforward. 

(iv) The formula not (F; G) is, by definition, -im (F V 
G) which, by (|^), is always valuated in the same 
way as -i(mF V mG). As L3 satisfies the De 
Morgan's laws, this is equivalent to -^mF A^mG, 
which by definition, is the formula not F, not G. 
The other part of property (iv) is analogous. 

(v) The formula not not not F is, by definition, 
-^m^m^mF. By (|Io|), we replace m^mF by 
-^mF obtaining ^m-i^mF, that is, -^mmF. 
Now, by @ this is equivalent to -imF, which 
is, by definition not F. 



(viii) The formula not _L is ^mL. As m_L is always 
valuated as (false) , this formula is equivalent to 
that is, T. The other part of (viii) is analo- 
gous. 

(ix) The formula {F, G <— H) is, by definition: 
{IH D I {FAG)) A {mH D m{F A G)) 

Applying (0) we obtain: 

{IH D IF A IG) A {mH D mF A mG) 

This is equivalent to: 

{^IHVlF) A {^IHVlG) A 

{^mH V mF) A {^mH V mG) 

(simply unfold the definition of D and apply dis- 
tributivity) . Finally, note that, by definition of 
<— , the last formula is just: 

{F <- H) A {G «- H) 

(ix) We just provide a proof sketch: 

{1(GVH) D IF)A 
{m{G V H) D mF) Def. of ^ 

{IGWlH D IF)A 
{mG V mH D mF) (§) 

{IG D IF) A {mG D mF)A 
{IH D IF) A {mH D mF) Def. of D 

{F <- G) A {F <- H) Def. of <- 

(x) Again, as a proof sketch: 

{1{G A^m^mH) D IF)A 

{m{G A -^m^mH) D mF) Def. of <— , not 
{l(G A -i-imH) D IF)A 

{m{G A^mH) D mF) @ 
{IGAlmH D IF)A 

{mG AmmH D mF) (g) 
{IG A mH D IF)A 

{mG A mH D mF) (|) 
{IG D IF V ~^mH)A 

{mG D mF V -rniH) Def. D 

F; notH <^G Def. of <-, not 

(xi) It is analogous to proof for (x). 



Proof of theorem [| 

First, from lemma || the corresponding non-nested pro- 
gram has the same set of L3 models. Second, lemma 
[l] shows that this program has the same models than 
our classical encoding. Therefore, we can directly ap- 
ply theorem |^. 



